A million-dollar painting turns out to be a forgery hours before the auction — but who swapped it, and when?